Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/5Pf2ovonkaD6TD-5fAFcOlbsbR0.roa
File: 5Pf2ovonkaD6TD-5fAFcOlbsbR0.roa (raw, json)
Hash identifier: fWsa9ayRcGHKHi8zQGZcogCsIYwDMpFgbcFcA1IAKfY=
Subject key identifier: E4:F7:F6:A2:FA:27:91:A0:FA:4C:3F:B9:7C:01:5C:3A:56:EC:6D:1D
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 019427471215E9E17853B5A1F3FADE266397
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/5Pf2ovonkaD6TD-5fAFcOlbsbR0.roa
Signing time: Thu 02 Jan 2025 13:49:16 +0000
ROA not before: Thu 02 Jan 2025 13:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59771
IP address blocks: 193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
2001:678:39c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:12:15:e9:e1:78:53:b5:a1:f3:fa:de:26:63:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: Jan 2 13:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f7f6a2fa2791a0fa4c3fb97c015c3a56ec6d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:43:ac:14:43:f0:2b:02:5b:20:95:bf:f9:
0b:f2:de:ff:54:ce:d3:06:28:ed:2e:9d:86:fe:b6:
11:0a:4f:c8:ff:db:ff:f4:fc:29:f8:eb:61:b3:b1:
bd:11:ed:f9:7c:2d:ca:f7:92:9b:0b:d9:48:18:bf:
44:1a:ea:a3:a2:8b:be:ea:ea:a5:f1:42:e9:ac:89:
ac:5b:10:47:ef:10:51:ec:53:c6:4c:df:5c:9e:40:
74:c7:89:a7:7f:c2:1e:38:25:30:c7:95:80:a0:9a:
0e:68:95:4c:49:5c:d1:a5:82:51:75:64:3e:b4:57:
1b:c3:3c:74:5a:87:20:5b:13:5a:6a:88:f5:05:5a:
9c:87:ed:27:a4:c1:8f:1f:22:af:e5:c5:be:d5:12:
7d:23:32:7c:37:58:6e:16:a9:c4:e2:43:b9:ab:14:
e0:1c:9f:80:cf:51:8c:e4:32:79:de:a1:5c:80:7a:
cd:2d:95:d2:ee:7d:0c:69:10:03:a6:ce:b0:31:52:
d4:d9:55:3b:1a:4f:d0:d3:74:04:a5:98:da:57:1b:
4a:ff:95:34:ad:85:ea:8a:1a:87:70:a3:91:e4:62:
c1:ce:9c:6c:6e:b4:d6:16:ce:14:df:59:24:66:aa:
56:9f:c0:e1:cc:33:24:76:d1:a1:b3:b4:b8:ea:ac:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:F6:A2:FA:27:91:A0:FA:4C:3F:B9:7C:01:5C:3A:56:EC:6D:1D
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/5Pf2ovonkaD6TD-5fAFcOlbsbR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
99:f0:4b:a4:75:15:23:e6:67:92:9a:82:6d:07:9c:2a:cc:1e:
7e:e6:8b:24:66:e7:9f:ff:b8:e2:42:ec:86:d9:02:b2:4b:db:
50:29:a9:6e:47:8f:d4:ae:2d:72:34:9e:5e:ba:e0:de:76:a9:
a2:b8:65:0f:b8:c5:68:7c:44:d8:e2:fe:73:9e:2b:22:58:84:
df:97:98:c0:fc:58:5d:4c:dc:f2:01:de:fb:4d:06:fc:d8:fe:
87:4f:d8:e3:ac:ed:79:00:90:43:ad:9a:1b:60:47:24:94:89:
c1:3b:eb:87:5d:44:eb:80:74:4e:0d:b0:19:a8:a6:d2:61:21:
4c:dd:27:aa:9f:c4:81:08:40:c9:9a:8a:8f:c8:d9:df:e4:4a:
6d:1e:59:2e:11:31:88:05:9e:8e:d6:d9:26:e5:01:60:e7:f1:
7d:7f:fa:f1:7e:63:22:0b:18:55:9e:92:c2:28:1f:91:9b:e7:
da:8f:20:7d:fa:b0:3b:de:67:34:89:83:0c:96:6b:5a:38:0d:
da:63:fd:b0:2d:26:d5:98:a3:ad:53:22:40:a4:59:3e:dd:f9:
9a:46:3a:06:d4:77:d1:74:44:3a:8c:16:5d:3f:01:cd:4f:53:
97:02:51:51:34:ad:93:57:de:b9:19:cf:37:0f:af:31:3d:76:
bd:ce:6e:aa
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQnRxIV6eF4U7Wh8/reJmOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDU4MTc2N2FmNDU3OWU0NGRhOTc3YjEwODJkOTRiM2M3
YjkyOTgwHhcNMjUwMTAyMTM0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGY3ZjZhMmZhMjc5MWEwZmE0YzNmYjk3YzAxNWMzYTU2ZWM2ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc5DrBRD8CsCWyCVv/kL8t7/VM7T
BijtLp2G/rYRCk/I/9v/9Pwp+Oths7G9Ee35fC3K95KbC9lIGL9EGuqjoou+6uql
8ULprImsWxBH7xBR7FPGTN9cnkB0x4mnf8IeOCUwx5WAoJoOaJVMSVzRpYJRdWQ+
tFcbwzx0WocgWxNaaoj1BVqch+0npMGPHyKv5cW+1RJ9IzJ8N1huFqnE4kO5qxTg
HJ+Az1GM5DJ53qFcgHrNLZXS7n0MaRADps6wMVLU2VU7Gk/Q03QEpZjaVxtK/5U0
rYXqihqHcKOR5GLBzpxsbrTWFs4U31kkZqpWn8DhzDMkdtGhs7S46qwD8QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOT39qL6J5Gg+kw/uXwBXDpW7G0dMB8GA1UdIwQY
MBaAFO4FgXZ69FeeRNqXexCC2Us8e5KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMt
NmRiYmEyYjFkY2E3LzEvNVBmMm92b25rYUQ2VEQtNWZBRmNPbGJzYlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMtNmRiYmEyYjFkY2E3
LzEvN2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwWl3AwQA
w1XgMA8EAgACMAkDBwAgAQZ4A5wwDQYJKoZIhvcNAQELBQADggEBAJnwS6R1FSPm
Z5Kagm0HnCrMHn7miyRm55//uOJC7IbZArJL21ApqW5Hj9SuLXI0nl664N52qaK4
ZQ+4xWh8RNji/nOeKyJYhN+XmMD8WF1M3PIB3vtNBvzY/odP2OOs7XkAkEOtmhtg
RySUicE764ddROuAdE4NsBmoptJhIUzdJ6qfxIEIQMmaio/I2d/kSm0eWS4RMYgF
no7W2SblAWDn8X1/+vF+YyILGFWeksIoH5Gb59qPIH36sDveZzSJgwyWa1o4Ddpj
/bAtJtWYo61TIkCkWT7d+ZpGOgbUd9F0RDqMFl0/Ac1PU5cCUVE0rZNX3rkZzzcP
rzE9dr3Obqo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:44 2025 by rpki-client